The ggLeap client provides ample security that will prevent users (or to some extent, employees) from accessing certain areas of the PCs. However, the default security feature of the client does not cover all of the possible areas that could be vulnerable to users that are creative enough to think of ways to circumvent the system.
The security policy feature can be customized according to your preference and will beef up weak points in the client's PC. To get started, go to Settings > Client configuration > Security.
PC Grouping
Security policy has a built-in PC grouping function that will enable you to set specific security setting for different groups of PCs. Note that existing PC groups under Groups config cannot be applied in here.
-To create a new security group, simply click "+ Add security group" button.
-To assign a PC to a group, right-click on the PC to open the menu and select the PC group.
Security settings
Security settings are divided into two sections: System and Browser settings. See below for the description and function of each option:
System settings
Task Manager - Enable/disable Task Manager from being accessible from the client's PC.
Batch Files - Enable/disable batch files from being used in startup command.
USB Access - Enable/disable USB storage device from being accessible on the client's PC.
PowerShell - Enable/disable access to Windows PowerShell.
Power Button Action - Enable/disable power button action.
Disabled hard drives - This will prevent access to any selected drives.
Blocked Applications - This will block any specified applications from running on the client PC (e.g. notepad.exe).
Browser settings
Incognito Mode - This will allow you to choose any of the following browser settings:
-Available: Users will be able to open browsers in normal or incognito mode.
-Disabled: Users will not be able to open browsers in incognito mode.
-Forced: Browsers will be only in incognito mode by default.
File Explorer - Enable/disable File explorer from being accessible via a web browser.
File Download - Enable/disable files from being downloaded on a browser.
Extensions - Enable/disable extensions for web browsers.
URL Blacklist - Any URL placed in this field will be blocked from being accessed in the web browser.
NOTE: Browser settings will only work with Chrome and Edge.
